This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Manifest

$ rpki-client -vvf rpki-repo.registro.br/repo/2TRVv2xs9Vyaf8pz6y3Zo1SfQ1LVWgr2ZhNhj1Dr65LF/1/A944FE7AA3B4B99B28426E9A7E20124A50450D12.mft
File:                     A944FE7AA3B4B99B28426E9A7E20124A50450D12.mft (raw, json)
Hash identifier:          6Sq5rbxEHNRRV5rZEx5JAm7U6SxdGE4JM4eni4IVHiw=
Subject key identifier:   F2:2F:BB:89:54:D7:CD:E8:75:65:40:7F:30:D7:54:63:8A:FB:54:46
Authority key identifier: A9:44:FE:7A:A3:B4:B9:9B:28:42:6E:9A:7E:20:12:4A:50:45:0D:12
Certificate issuer:       /CN=A944FE7AA3B4B99B28426E9A7E20124A50450D12
Certificate serial:       70A70A1EB224FBE5FA155C7F4667F286818B34E1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A944FE7AA3B4B99B28426E9A7E20124A50450D12.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2TRVv2xs9Vyaf8pz6y3Zo1SfQ1LVWgr2ZhNhj1Dr65LF/1/A944FE7AA3B4B99B28426E9A7E20124A50450D12.mft
Manifest number:          02CE
Signing time:             Sat 20 Sep 2025 01:26:11 +0000
Manifest this update:     Sat 20 Sep 2025 01:21:11 +0000
Manifest next update:     Sun 21 Sep 2025 04:05:11 +0000
Files and hashes:         1: 34352e3136372e3130342e302f32322d3232203d3e20323638303534.roa (hash: ekxkEL5mHeSddQcV572cEg0Z+t+fDlJQgQIWQEr+XOo=)
                          2: 34352e3136372e3130342e302f32332d3233203d3e20323638303534.roa (hash: p17QvS+vQHYVP7OMkaovOIQv4RfrTimlevQvv/YBhlc=)
                          3: 34352e3136372e3130362e302f32332d3233203d3e20323638303534.roa (hash: gshBf9Pbyg21oApR7Cffrc4AzYkE5JZQTpA4LOA3ePo=)
                          4: 323830343a353734303a3a2f33322d3332203d3e20323638303534.roa (hash: k0DDAqM0LXGIweVTQ9VrXv82aIU+USC13Pc50Sff4cI=)
                          5: A944FE7AA3B4B99B28426E9A7E20124A50450D12.crl (hash: TBN3Ln6tXDRkT+SXr6Fo/Y5GzUsgcJEstQRPxF9DWSg=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:a7:0a:1e:b2:24:fb:e5:fa:15:5c:7f:46:67:f2:86:81:8b:34:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A944FE7AA3B4B99B28426E9A7E20124A50450D12
        Validity
            Not Before: Sep 20 01:21:11 2025 GMT
            Not After : Sep 21 04:05:11 2025 GMT
        Subject: CN=F22FBB8954D7CDE87565407F30D754638AFB5446
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:53:3c:7f:54:14:f8:fe:c9:d2:60:e1:c5:bc:
                    42:6b:df:0c:b8:33:2d:3e:c8:24:76:c4:3b:9b:bb:
                    50:46:f1:96:95:7c:b9:7c:e3:4c:36:48:98:c2:0c:
                    96:de:c7:ee:c3:5c:74:cb:e0:17:e1:f7:a5:81:93:
                    4b:ba:55:65:5e:99:b0:7d:46:cc:2e:e8:27:4a:9d:
                    e2:97:a5:da:16:bb:b6:2c:4c:25:65:2d:3c:3b:58:
                    7b:59:ce:ea:24:e7:d2:7e:0d:0a:4e:30:49:15:0f:
                    d7:94:56:cf:dd:6f:06:e6:7a:71:a7:82:fd:4c:2c:
                    29:bf:db:84:c7:6f:6b:53:ce:20:8c:0d:d4:4f:7c:
                    98:b1:b8:54:8b:93:a2:7f:b9:df:cf:11:d7:82:78:
                    0c:2c:33:57:57:df:eb:be:41:1e:38:e3:06:44:c7:
                    04:b4:83:84:84:91:38:b7:a5:17:34:e9:c3:bc:cc:
                    7f:93:ea:09:bd:94:3d:50:de:bf:8b:cd:d8:4e:69:
                    04:24:2b:2b:fa:c0:97:1c:6d:54:5b:30:ca:30:29:
                    87:e0:0f:c6:1d:4a:13:59:20:92:16:33:f3:42:3e:
                    37:9c:16:d1:90:bc:a2:ea:f9:22:d3:f3:77:e6:e3:
                    46:0e:77:87:b7:d3:68:21:6a:e5:ee:4f:06:e6:59:
                    30:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:2F:BB:89:54:D7:CD:E8:75:65:40:7F:30:D7:54:63:8A:FB:54:46
            X509v3 Authority Key Identifier:
                keyid:A9:44:FE:7A:A3:B4:B9:9B:28:42:6E:9A:7E:20:12:4A:50:45:0D:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2TRVv2xs9Vyaf8pz6y3Zo1SfQ1LVWgr2ZhNhj1Dr65LF/1/A944FE7AA3B4B99B28426E9A7E20124A50450D12.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/A944FE7AA3B4B99B28426E9A7E20124A50450D12.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2TRVv2xs9Vyaf8pz6y3Zo1SfQ1LVWgr2ZhNhj1Dr65LF/1/A944FE7AA3B4B99B28426E9A7E20124A50450D12.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:36:55:ba:f2:d9:6b:93:2e:59:c5:a3:72:1e:c7:29:a2:6f:
         39:c4:f2:d4:6f:bb:8d:0d:38:ed:b4:ca:fd:3a:04:bd:c2:62:
         c0:55:03:c3:70:fb:07:2a:0d:e3:07:31:da:c1:7f:82:f4:85:
         bd:c7:2f:eb:18:f1:7d:fc:9b:27:0e:90:4d:2d:d9:6a:dc:77:
         0d:e7:8a:62:58:3c:b0:ca:dc:77:63:26:4a:75:44:f5:50:40:
         ba:a9:c3:8b:c3:ac:ad:c8:b1:5d:21:7b:75:7c:a0:a2:48:06:
         c3:61:26:35:4a:4a:81:03:6d:60:cd:91:8f:5f:61:c2:08:a7:
         90:53:45:cc:30:95:fb:86:91:f7:04:76:65:2f:c0:2e:fb:a7:
         ae:2d:e1:f4:e6:a9:da:d8:e7:bf:d0:36:e1:2e:b6:3b:54:00:
         9b:08:dc:f2:cd:64:84:ba:5a:43:90:22:ea:fe:7e:69:f1:c1:
         d0:a5:ba:3c:44:5d:44:4c:24:64:f4:96:7a:f9:1a:0e:5e:ec:
         7a:91:d3:d1:b8:4e:bf:7e:fb:9f:39:7f:60:47:9b:81:10:26:
         20:f5:58:79:f9:ca:4b:10:e1:4d:a3:a0:96:a4:cc:61:7c:a5:
         84:23:8b:f4:32:3d:1a:21:e0:bd:e4:00:a0:77:80:b2:32:88:
         35:ac:c7:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----